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REMARKS 

Claims 1-1 1 are pending. Claims 10 and 1 1 are newly presented. Reconsideration 
and allowance of the present application based on the following remarks are respectfully 
requested. 

Claim Rejections Under 35 (7.S.C. § 103 

Claims 1-3, 5, 6, 8, and 9 were rejected under 35 U.S.C. § 103(a) over Comay et al. 
(U.S. Patent No. 6,363,489) in view of Malan et al. (U.S. Publication No. 2002/0035698). 
Applicants respectfully traverse this rejection. 

Claim 1 recites, in part, a security system on a network that includes routing means 
for tracking the intrusion, for all routes through which the intruder passed, based on the 
active packet transmitted thereto from the intrusion detecting means, and filtering the packet 
associated with the intruder, thereby isolating the intruder. As admitted in the Office Action, 
on pages 2-3, Comay fails to teach or suggest this feature of claim 1 . The Examiner alleges 
that Malan teaches this feature. Applicants respectfully disagree. 

Malan relates to a method for protecting a public network from undesirable traffic by 
analyzing the network traffic and limiting access of the undesirable user to the public 
network. Malan does not relate to an intrusion detection or security since the networks that 
concern Malan are public. Furthermore, the denial of service tracker in Malan merely 
gathers statistics from the packet forwarding infrastructure about where a packet originated 
from. Specifically, once the statistics are received, a controller processes the information by 
"working backwards" towards the source. See, for example, paragraphs [0091] - [0098]. 
Malan does not teach or even suggest, tracking an intrusion based on the active packet 
transmitted to the intruder since Malan merely relies on information that was gathered about 
the originally transmitted packet. Therefore, both Malan and Comay fail to teach or suggest 
at least this feature of claim 1. Accordingly, no combination of Malan and Comay teach or 
suggest, a security system on a network that includes routing means for tracking the 
intrusion, for all routes through which the intruder passed, based on the active packet 
transmitted thereto from the intrusion detecting means, and filtering the packet associated 
with the intruder, thereby isolating the intruder, as recited in claim 1. 

Claims 6 and 9 are believed allowable for at least the same reasons presented above 
with respect to claim 1 since claims 6 and 9 recite features that are similar to the features of 
claim 1 discussed above. 
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Claims 2, 3, 5, and 8 are believed allowable for at least the reasons presented above 
with respect to claims 1 and 6 by virtue of their dependence upon claims 1 and 6. 

Accordingly, Applicants respectfully request reconsideration and withdrawal of this 
rejection. 

Allowable Subject Matter and New Claims 

Claims 10 and 1 1 are newly presented, fully supported by the specification as 
originally filed and believed allowable over the prior art of record. 

Applicants appreciate the Examiner's indication that claims 4 and 7 contain allowable 
subject matter and would be allowable if rewritten in independent form to include all of the 
features of their respective base claims and any intervening claim. However, in view of the 
foregoing, Applicants respectfully submit that all of the claims (claims 1-11) are in condition 
for allowance. 

Conclusion 

Therefore, all objections and rejections having been addressed, it is respectfully 
submitted that the present application is in a condition for allowance and a Notice to that 
effect is earnestly solicited. 

Should any issues remain unresolved, the Examiner is encouraged to contact the 
undersigned attorney for Applicants at the telephone number indicated below in order to 
expeditiously resolve any remaining issues. 
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